Managing Privileges参考.ppt

Managing Privileges Objectives After completing this lesson, you should be able to do the following: Identify system and object privileges Grant and revoke privileges Identify auditing capabilities Managing Privileges Two types of Oracle user privileges: System: Enables users to perform particular actions in the database Object: Enables users to access and manipulate a specific object System Privileges There are over 100 distinct system privileges The ANY keyword in the privileges signifies that users have the privilege in any schema The GRANT command adds a privilege to a user or a group of users The REVOKE command deletes the privileges System Privileges: Examples Granting System Privileges SYSDBA and SYSOPERPrivileges System Privilege Restrictions O7_DICTIONARY_ACCESSIBILITY parameter Controls restrictions on SYSTEM privileges If set to TRUE, access to objects in SYS schema is allowed Default is FALSE Ensures that system privileges that allow access to any schema do not allow access to SYS schema Revoking System Privileges Revoking System Privileges WITH ADMIN OPTION Object Privileges Object priv. Table View Sequence Procedure ALTER ? ? ? DELETE ? ? EXECUTE ? INDEX ? ? INSERT ? ? REFERENCES ? SELECT ? ? ? UPDATE ? ? Granting Object Privileges Revoking Object Privileges Revoking Object Privileges WITH GRANT OPTION Obtaining Privileges Information Data Dictionary Views DBA_SYS_PRIVS SESSION_PRIVS DBA_TAB_PRIVS DBA_COL_PRIVS Auditing Auditing is the monitoring of selected user database actions Used to Investigate suspicious database activity Gather information about specific database activities Auditing Guidelines Define what you want to audit Audit users, statements, or objects Statement executions Successful statement executions, unsuccessful statement executions or both Manage your audit trail Monitor the growth of the audit trail Protect the